CVE-2025-68734 isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()

In the Linux kernel, the following vulnerability has been resolved: isdn: mISDN: hfcsusb: fix memory leak in hfcsusbprobe In hfcsusbprobe, the memory allocated for ctrlurb gets leaked when setupinstance fails with an error code. Fix that by freeing the urb before freeing the hw structure. Also...

PT-2025-53000

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the hfcsusb probe function within the mISDN hfcsusb component of the Linux kernel. Specifically, memory allocated for ctrl urb is leaked when setup instance fails...

EUVD-2017-9417

Malware in sbrugna...

EUVD-2008-1791

Malware in sbrugna...

EUVD-2017-3674

Malware in sbrugna...

EUVD-2025-28026

Malicious code in bioql PyPI...

Malicious code in ladder-text-js (npm)

The package ladder-text-js was found to contain malicious code...

MAL-2025-24892 Malicious code in ladder-text-js (npm)

The package ladder-text-js was found to contain malicious code...

CVE-2024-27620

An issue in Ladder v.0.0.1 thru v.0.0.21 allows a remote attacker to obtain sensitive information via a crafted request to the API...

WordPress plugin Tournamatch 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2017-18291

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET user parameter...

Schneider Modicon Ladder Logic Upload/Download

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Schneider Modicon Ladder Logic Upload/Download', 'Description' = %q The Schneider Modicon with Unity series of PLCs use Modbus function code 90...

CVE-2024-27620

An issue in Ladder v.0.0.1 thru v.0.0.21 allows a remote attacker to obtain sensitive information via a crafted request to the API...

CVE-2024-27620

An issue in Ladder v.0.0.1 thru v.0.0.21 allows a remote attacker to obtain sensitive information via a crafted request to the API...

CVE-2024-27620

An issue in Ladder v.0.0.1 thru v.0.0.21 allows a remote attacker to obtain sensitive information via a crafted request to the API...

CVE-2024-27620

CVE-2024-27620 affects Ladder v0.0.1 through v0.0.21. A server-side request forgery flaw in the API allows remote attackers to obtain sensitive information. Red Hat and NVD entries confirm the issue and the affected range; 0day/Exploit-DB variant describes exploitation against internal metadata e...

PT-2024-21971

Name of the Vulnerable Software and Affected Versions Ladder versions 0.0.1 through 0.0.21 Description The issue allows a remote attacker to obtain sensitive information via a crafted request to the API. Recommendations For versions 0.0.1 through 0.0.21, update to a version that contains a fix fo...

CVE-2024-27620

An issue in Ladder v.0.0.1 thru v.0.0.21 allows a remote attacker to obtain sensitive information via a crafted request to the API...

Ladder v0.0.21 - Server-side request forgery Vulnerability

Exploit Title: Ladder v0.0.21 - Server-side request forgery SSRF Date: 2024-01-20 Exploit Author: @chebuya Software Link: https://github.com/everywall/ladder Version: v0.0.1 - v0.0.21 Tested on: Ubuntu 20.04.6 LTS on AWS EC2 ami-0fd63e471b04e22d0 CVE: CVE-2024-27620 Description: Ladder fails to...

Ladder Security Breach

Ladder is a web proxy that helps bypass paywalls. A security vulnerability exists in Ladder version v0.0.21, which stems from an inability to apply sufficient default restrictions to target addresses. An attacker exploiting the vulnerability could access private address ranges, local listening...